Aspects of Network Security for VoIP Solutions Using IMS Core Network and Wi-Fi Access

摘要

A network providing Voice over Internet Protocol (VoIP) service requires many network elements. Each network element may have its own set of security capabilities, but not all security capabilities on all network elements are necessary at the same time for a given network configuration. An end-to-end network view is necessary to choose appropriate security capabilities while minimizing network overhead. For VoIP, using an IP Multimedia Subsystem (IMS) core network and wireless fidelity (Wi-Fi~*) access, the service provider can offer the feature functionality of the core network to both enterprise and residential customers simultaneously. However, both market segments provide their own set of unique security challenges, and what is appropriate for one market segment is not necessarily appropriate for the other. This paper explores various security implications for both of these market segments and proposes options for securing each network configuration. Security aspects of the control plane, bearer plane, and management plane are considered.